SRX Services Gateway
Reply
Contributor
fbouzemarene
Posts: 35
Registered: ‎03-06-2008
0
Accepted Solution

Policy based routing and source routing on srx210

Hi,

 

i have just configured PBR on a srx210 using Firewall filter.

The goal was to redirect FTP traffic to isp1 and other traffic to isp2.

 

Now what i just want to achieve is resiliency : when isp1 is down ftp traffic will still transit using isp2 and the same for the other traffic when isp2 is down.

 

Other question : How to implement Source based routing ?

 

Many thanks 

Juniper Employee
xhoms
Posts: 33
Registered: ‎08-20-2009
0

Re: Policy based routing and source routing on srx210

All that you need is a way to make the routes to isp1 inactives when it is not ready to handle traffic. The same for isp2

 

The PBR won't send any traffic through inactive routes.

 

There are some references on how to achieve this with event-scripts & RPM  (track-ip behavior)

 

Xavi

Contributor
fbouzemarene
Posts: 35
Registered: ‎03-06-2008
0

Re: Policy based routing and source routing on srx210

ok 

 

i will look at that as i am not very "fluent" on junos or maybe do you have a set of commands to do that....:smileyhappy:

 

any suugestion for source based routing? i see that i can enable source routing on the routing instance then what must i do?

 

many thanks

Juniper Employee
xhoms
Posts: 33
Registered: ‎08-20-2009
0

Re: Policy based routing and source routing on srx210

Take a look at the thread at http://forums.juniper.net/jnet/board/message?board.id=JUNOS&message.id=222&query.id=532507#M222

I'll try to find an example for you. Do you have any email account where I could send some attachements?
Contributor
fbouzemarene
Posts: 35
Registered: ‎03-06-2008
0

Re: Policy based routing and source routing on srx210

[ Edited ]

thank you for the link that i will check right now.

 

i think my email is visble in my profile but here it is :

 

farid.bouzemarene

 

_at_

 

magirus.com

 

many thanks

Regular Visitor
Exyza_1
Posts: 5
Registered: ‎08-24-2009
0

Re: Policy based routing and source routing on srx210

Hi All I;m also struggling abit with the Srx Gateways , is there any documentation or examples for a PBR setup.

 

I'm trying to create a filter with destinations port 80 to go to a diffrent next hop but there is no next hop option on the filter actions.

How would I do that ?

Contributor
fbouzemarene
Posts: 35
Registered: ‎03-06-2008
0

Re: Policy based routing and source routing on srx210

Hi,

 

you have to create a forwarding type Routing Instance ( where you will add a static route for 0.0.0.0/0 and the next-hop for your router ) and the action filter have to be routing-instance where you will specify the routing instance name that you created early.

 

let me know if it helps ....

Regular Visitor
Exyza_1
Posts: 5
Registered: ‎08-24-2009
0

Re: Policy based routing and source routing on srx210

[ Edited ]

Ah ok thats perfect , so for my setup I'll have three routing instanaces.
 
Local LAN

Main Mpls Router

Backup ADSL Link

 

But then which way is the best way to failover between the routing instances bfd or periodic events ?

Becuase I want to push al web traffic ovewr the adsl and rest via the main link with qos and the nfailover vice versa between both.

 

But I see I get route loop errors when I try to route between the instances  , so then what instance-type did you use ?

Message Edited by Exyza_1 on 08-24-2009 04:47 AM
Contributor
fbouzemarene
Posts: 35
Registered: ‎03-06-2008
0

Re: Policy based routing and source routing on srx210

forwarding instance
pkc
Contributor
pkc
Posts: 111
Registered: ‎09-24-2008
0

Re: Policy based routing and source routing on srx210

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.